
JINL.05988 (Customer) asked a question.
Hello Okta Community,
We are analyzing our Okta System Logs (specifically filtering by /api/v1/logs?filter=target.id eq "{appId}" and target.type eq "AppInstance") to track user access history for an application.
I have two questions regarding the interpretation of the log data:
1. Difference in User-Agent Strings
We noticed a variation in the User-Agent field for access events coming from our Android application. Could you please explain the difference between these two strings and what the presence of the additional libraries in the second one signifies?
- User-Agent A: okta-auth-foundation-kotlin/2.0.1 Android/33
- User-Agent B: okta-auth-foundation-kotlin/2.0.1 okta-oauth2-kotlin/2.0.1 okta-web-authentication-ui-kotlin/2.0.1 Android/33
2. Sufficiency of Device/Client Information
When we want to determine the specific device a user accessed the application from, are the following three fields from the client.user_agent object typically sufficient, or should we be looking for other fields to get complete and reliable device details?
- client.user_agent.raw_user_agent
- client.user_agent.os
- client.user_agent.browser

Hello @JINL.05988 (Customer) Thank you for posting on our Community page!
The Okta Community Questions forum isn't really meant for in-depth troubleshooting.
We recommend opening a Support ticket, then continuing the discussion with the assigned Technical Support Engineers. They'll be able to access additional tools and resources to help you get to the bottom of it.
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.